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Challenges 


Increasing popularity of personal messaging applications exposing banks’ 
customer data to privacy and cyber risks 


e Banks concerned that information being shared via personal messaging applications outside the 
existing controls and security in place for communication 


e Chat data is stored on employees’ personal messaging applications which are unavailable for record- 
keeping, oversight, recovery, audit or compliance by banks 


e Cybersecurity concerns as files which contained malware (e.g. virus) and malicious links could be sent 
by customers 


e Increasing incidents of phishing and scammers impersonating bank employees through instant 
messaging 


The Challenge of Phishing scams using Instant Messaging 


e Hong Kong - There are more than 80 reports made by banks to the HKMA about Phishing Instant 
Messaging scams in 2021! 


e United Kingdom - National Trading Standards launched a campaign with WhatsApp to help educate 
the public on how to protect themselves from scams and found that almost 59% of surveyed people 
said they have received a message-based scam or know someone who has in 20207 


LEAP>PE RT 'Fraudulent Bank Websites, Phishing Emails and Similar Scams, HKMA 
sss 2NationWhatsApp launches ‘STOP. THINK. CALL.’ campaign to stamp out message-based scams, National Trading Standards (November 2021) 
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Federated Messaging Orchestration Platform (FMOP) 


Empowering employees, customers & external parties by enabling Banks to: 


e Implement an enterprise Instant Messaging (IM) solution within their network environment instead of using 
personal messaging applications, and integrating their IM system with the existing authentication 
mechanisms 


e Detect potential leaks of sensitive data (e.g. Identity number, Confidential Documents, etc.) according to 
bank's rules, and block and/or send a warning message to employees 


e Implement IM hygiene solutions that allow organisations to enforce IM usage policies by monitoring usage, 
managing IM traffic and filtering content to block unwanted messages, malware and offensive material, as 
well as logging all IM messages for audit purposes. All recalled, deleted and disappeared messages are also 
stored for analysis 


e All incidents are recorded and alerts are sent to relevant departments and management with dashboard for 
real time review of incidents and full access to messages 


e Allow customers to use their preferred personal messaging applications without installing any additional 
application to interact with the banks 


e Integrate with business critical applications to record and monitor business conversations only. Employee 
data is protected as personal communications are not subject to monitoring while at the same time ensure 
banks’ compliance with regulatory reporting and other regulatory requirements 


LEAP>PERT 


Federated Messaging Orchestration 


Proof of Value 


financial 
intentional 


and 
or 


e Mitigation of reputational 
damage due to accidental 
disclosure of sensitive data 


e Alerting system for management, compliance 
and relevant departments to ensure awareness 
of potential breaches and appropriate actions 
to remedy 


e Prevention of receiving infected files and 
attachments that could severely impact bank’s 
systems and operations 


e Using only official corporate messaging 
accounts (no personal accounts) reassures 
bank's customers who are being targeted by 
scammers using instant messaging 


e Complete record of all communication 
between bank's employees and customers on 
personal messaging applications for analytics, 
improving customer service/engagement and 
training 
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Elevate Instant Messaging to an Enterprise 
level with the power of integrations 
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